Privacy Policy

1. Information We Collect

When you use Smart Asset Management (SAM), we may collect the following types of information:

• Account Information: Name, email address, and profile information when you create an account
• Usage Data: Information about how you use our application, including features accessed and actions performed
• Technical Data: IP address, browser type, device information, and operating system
• Communication Data: Messages you send through our contact forms or support channels

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our services
• To authenticate your identity and manage your account
• To improve our application and user experience
• To respond to your inquiries and provide customer support
• To send important updates about our services
• To detect and prevent fraud or security issues

3. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Service Providers: Trusted third-party services that help us operate our platform
• Legal Requirements: When required by law, regulation, or legal process
• Security: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, sale, or transfer of assets

4. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access (Article 15): You can request a copy of all personal data we hold about you. Use the data export feature in your Account Settings to download your data instantly.
• Right to Rectification (Article 16): You can request correction of inaccurate or incomplete personal data through your Account Settings or by contacting us.
• Right to Erasure (Article 17): You can request deletion of your personal data. Use the account deletion feature in Account Settings or contact us. We will erase your data within 30 days unless we have a legal obligation to retain it.
• Right to Restriction (Article 18): You can request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of your data.
• Right to Data Portability (Article 20): You can request your data in a structured, commonly used, machine-readable format (JSON). Use the data export feature in Account Settings.
• Right to Object (Article 21): You can object to processing of your personal data for direct marketing purposes. Unsubscribe from newsletters via Account Settings at any time.

To exercise any of these rights, use the self-service features in your Account Settings or email us at privacy@getsam.app. We will respond within 30 days.

5. Cookies & Tracking

We use essential cookies for authentication (powered by Supabase) and analytics cookies via Vercel Analytics to understand usage patterns. We do not use advertising or third-party tracking cookies.

• Essential Cookies: Required for authentication and session management. These cannot be disabled without breaking core functionality.
• Analytics (Vercel Analytics): Privacy-friendly, anonymised web analytics with no cross-site tracking. See Vercel’s privacy policy at vercel.com/legal/privacy-policy for details.

You can control cookie preferences through the cookie consent banner shown on your first visit or through your browser settings. Rejecting analytics cookies will not affect website functionality.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Subscription & Billing Data: Retained for 7 years after subscription ends to comply with UK financial record-keeping regulations.
• Usage & Analytics Data: Anonymised after 12 months. Aggregated statistics may be retained indefinitely.
• Support Communications: Retained for 2 years after last contact to provide continuity of support.
• Device Identifiers: Cleared immediately upon account deletion or device removal from your account.

7. Data Protection Contact

For any data protection queries, concerns, or to exercise your GDPR rights, contact our data protection team:

Email: privacy@getsam.app. We aim to respond to all data protection requests within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@getsam.app
• Contact Form: Get in touch

We will respond to privacy-related inquiries within 30 days of receipt.